The module ipapython.dnssec.odsmgr is the only module in ipalib, ipaclient, ipapython and ipaplatform that uses lxml.etree. The XML handling code can easily replaced with Python stdlib's xml.etree except for one feature: stdlib's xpath() does not support starts-with().

Without lxml dependency we can drop a dependency on a C extension module, see #6468.